Al usar AWS re:Post, aceptas las AWS re:Post Términos de uso
AWS re:Postre:Post

Account is denied access to create Glue crawler

3

I am using an IAM role AWSGlueServiceRole created in AWS Glue and tried to create the crwaler to run on S3 source. The error I get is

The following crawler failed to create: "abc" Here is the most recent error message: Account XXX is denied access.

Also tried with another role that I created with below policies. But still get the same error.

AmazonS3FullAccess AWSGlueServiceRole AdministratorAccess AWSGlueConsoleFullAccess AWSGlueSchemaRegistryFullAccess AWSGlueDataBrewServiceRole

Enter image description here

  • Rajkumar Jain
    hace un año

    Hi,

    I also faced this issue, reason as below

    1. Check your payment options are updated in AWS account in Payment preference tab.
    2. Your password reset recently as per compliance.
    3. If above both are correctly set up then raise support ticket in system as AWS support team only can help to identify SCP is configure correctly or not. May be some vulnerability in your account due to that AWS stop Glue service for you. I hope this will help you to resolve your problem. Thanks Rajkumar
Temas
Seguridad, identidad y cumplimientoAnálisisGestión y gobierno
Etiquetas
AWS Identity and Access ManagementAWS GlueAWS Account ManagementPolíticas de IAM
Idioma
English
rePost-User-1592616
preguntada hace un año1465 visualizaciones
4 Respuestas
0

Same issue here

Jona
respondido hace 6 días
  • abhishekjain5820
    hace 3 días

    Have you found the solution?

  • Jona
    hace 2 días

    I arose a support ticket and they did their magic. Now I'm able to create crawlers

0

Are you using AWS Organizations and a member account under the Organization? Check if your Organization restricts Glue crawler creation. AWS Organization can overwrite any AdministratorAccess using Service control policies (SCPs). Its possible that some SCPs deny you access. SCPs affect all users and roles in attached accounts, including the root user. **Reference: **https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html

profile pictureAWS
Ananth Tirumanur
respondido hace un año
0

Hello,

It does not seems like Glue related issue. This seems like some account level problem. I believe if you try to access other service you will face the same issue. I would suggest reach out to AWS Support to check if anything is blocked from account level.

AWS
Shubham_P
respondido hace un año
0

I've followed all the advice given here, but still getting the same error. How did you solve the issue @rePost-User-1592616?

Jorgedch
respondido hace 8 meses

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas

Contenido relevante